PT-2019-13338
CVE-2019-13447
·
تاريخ النشر
2019-07-17
·
تاريخ التحديث
2019-07-18
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Sertek Xpare version 3.67
Description
An issue was discovered where the login form does not sanitize input data, allowing a malicious agent to potentially access the backend database via SQL injection.
Recommendations
For Sertek Xpare version 3.67, consider implementing input sanitization for the login form to prevent SQL injection attacks. As a temporary workaround, restrict access to the login form and backend database to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾